Alta
CVE-2025-26892
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Media
CVE-2025-32561
WP_DEBUG Toggle <= 1.1 - Reflected Cross-Site Scripting
Media
CVE-2025-32513
Nomupay Payment Processing Gateway <= 7.1.6 - Reflected Cross-Site Scripting
Alta
ghsa-f87w-3j5w-v58p
CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows
Crítica
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Media
CVE-2025-32426
Formie has XSS vulnerability for email notification content for preview
Media
CVE-2025-32427
Formie has XSS vulnerability for importing forms
Media
CVE-2025-3292
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
Media
CVE-2025-2841
Cart66 Cloud <= 2.3.7 - Unauthenticated Information Exposure
Media
CVE-2025-2881
Developer Toolbar <= 1.0.3 - Unauthenticated Information Exposure
Media
CVE-2025-32395
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Media
CVE-2025-32027
Yii does not prevent XSS in scenarios where fallback error renderer is used
Media
CVE-2025-26746
Advanced Custom Fields: Link Picker Field <= 1.2.8 - Reflected Cross-Site Scripting
Media
CVE-2025-26906
WP Delete User Accounts <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-13338
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cache
Media
CVE-2025-26749
Additional Custom Product Tabs for WooCommerce <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-3276
SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-13337
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'
Media
CVE-2025-26744
JetBlog <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-2269
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter
Media
CVE-2025-32606
Listings for Buildium <= 0.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-3282
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Media
CVE-2025-3514
SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-26998
SKT Blocks – Gutenberg based Page Builder <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.